"Geoffrey L. Scully" wrote:
> I applied it to the interfaces. But it does not make a difference. They still
> surf just like before. Not working for some reason.
>
> Mauro Jaskelioff wrote:
>
> > If you apply the filter to the interface, everyone willl be filtered.
> > Unless this is what you want, don;t apply the filter to the interface. Just
> > create a mail.in and a mail.out. In RADIUS the filter-id attribute should be
> > set to "mail".
> > The DNS is important so your users could use smtp.yourdomain.com as SMTP
> > server in their mail client
> > Remember that .in is traffic coming from the dial-up user to the NAS, and
> > .out is traffic going from the NAS to the Dial-up user.
> >
> > -----Mensaje original-----
> > De: Geoffrey L. Scully <info@olynet.com>
> > Para: radiusnt@iea-software.com <radiusnt@iea-software.com>
> > Fecha: Martes, 09 de Marzo de 1999 07:20 p.m.
> > Asunto: Re: [RadiusNT] Filters
> >
> > >I named them email and emailout. Then I set the interfaces to use input as
> > >email and output as emailout. Then I make the two extra attributes in
> > Radius as
> > >framed-filter "email" and framed-filter "emailout", correct? Why is the
> > DNS
> > >port important for output?
> > >
> > >Mauro Jaskelioff wrote:
> > >
> > >> For most NASes you set the filter name in Radius (ie: Filter-Id=mail )
> > and
> > >> then you define in the NAS two filters, mail.in and mail.out. This is the
> > >> most standard procedure. The HiperArc also has others way to define
> > filters,
> > >> though.
> > >>
> > >> -----Mensaje original-----
> > >> De: Geoff <info@olynet.com>
> > >> Para: radiusnt@iea-software.com <radiusnt@iea-software.com>
> > >> Fecha: Martes, 09 de Marzo de 1999 03:47 p.m.
> > >> Asunto: Re: [RadiusNT] Filters
> > >>
> > >> >How do you determine whether it is an input or output filter. I thought
> > it
> > >> >just worked both ways.
> > >> >----- Original Message -----
> > >> >From: Mauro Jaskelioff <mauro@citynet.net.ar>
> > >> >To: <radiusnt@iea-software.com>
> > >> >Sent: Tuesday, March 09, 1999 4:21 AM
> > >> >Subject: RE: [RadiusNT] Filters
> > >> >
> > >> >
> > >> >>You'll probable want to allow port 53 (DNS).
> > >> >>since you're using tcp-src-port, make sure you apply this to the .out
> > >> >>filter.
> > >> >>
> > >> >>-----Mensaje original-----
> > >> >>De: Geoffrey L. Scully <info@olynet.com>
> > >> >>Para: radiusnt@iea-software.com <radiusnt@iea-software.com>
> > >> >>Fecha: Martes, 09 de Marzo de 1999 02:41 a.m.
> > >> >>Asunto: [RadiusNT] Filters
> > >> >>
> > >> >>
> > >> >>>Hey, should this be a good filter for email only on a 3COM Hiper
> > >> >>>chassis?
> > >> >>>
> > >> >>>
> > >> >>>#filter
> > >> >>>IP:
> > >> >>>001 ACCEPT tcp-src-port = 25;
> > >> >>>002 ACCEPT tcp-src-port = 110;
> > >> >>>003 ACCEPT tcp-src-port = 119;
> > >> >>>004 DENY;
> > >> >>>
> > >> >>>
> > >> >>>For more information about this list, including removal, please
> > >> >>>see this URL: http://www.iea-software.com/maillist.html
> > >> >>>
> > >> >>
> > >> >>
> > >> >>For more information about this list, including removal, please
> > >> >>see this URL: http://www.iea-software.com/maillist.html
> > >> >
> > >> >
> > >> >For more information about this list, including removal, please
> > >> >see this URL: http://www.iea-software.com/maillist.html
> > >> >
> > >>
> > >> For more information about this list, including removal, please
> > >> see this URL: http://www.iea-software.com/maillist.html
> > >
> > >
> > >For more information about this list, including removal, please
> > >see this URL: http://www.iea-software.com/maillist.html
> > >
> >
> > For more information about this list, including removal, please
> > see this URL: http://www.iea-software.com/maillist.html
>
> For more information about this list, including removal, please
> see this URL: http://www.iea-software.com/maillist.html
For more information about this list, including removal, please
see this URL: http://www.iea-software.com/maillist.html